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2. A copy of the report and its annexes, if any, is being transmitted to the International Bureau for communication to 
all the elected Offices. 

3. Where required by any of the elected Offices, the International Bureau will prepare an English translation of the 
report (but not of any annexes) and will transmit such translation to those Offices. 

4. REMINDER 



The applicant must enter the national phase before each elected Office by performing certain acts (filing 
translations and paying national fees) within 30 months from the priority date (or later in some Offices)( Article 
39(l))(see also the reminder sent by the International Bureau with Form PCT/IB/301). 

Where a translation of the international application must be furnished to an elected Office, that translation must 
contain a translation of any annexes to the international preliminary examination report. It is the applicant's 
responsibility to prepare and furnish such translation directiy to each elected Office concerned. 

For further details on the applicable time limits and requirements of the elected Offices, see Volume II of the PCT 
Applicant's Guide. 
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2. CITATIONS AND EXPLANATIONS 

Claims 1-86 meet the criteria set out in PCT Article 33(2)-(4), because the prior art, particularly Ginter et al. (U.S. Patent No. 
5,892,900), Kopdosky et al. (U.S. Patent No. 6,219,628), Steinmetz et al. (U.S. Patent No. 6,219,626) and Testa et al. (U.S. Patent 
No. 6,205,407) fail to teach or suggest a computer-assisted method (or a computing system or a computer program medium) of 
generating at least one test procedure for a target system having at least one device capable of being identified, each of the at least 
one device having hardware and/or software, method (system or computer program medium) comprising the steps of: 
for each of at least one platform category, determining which of one or more test procedures will be used to test hardware and/or 
software associated with at least one platform category based on a mapping between the test procedures and the at least one 
predefined standard, regulation and/or requirement; and 

generating one or more test procedures as determined in step before for each platform category. 



Claims 1-86 have industrial applicability as defined by PCT Article 33(4), since computer-assisted method, or a computing system, 
or a computer program medium of generating at least one test procedure for a target system is a good tool for performing security 
risk assessment. 
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